WordPress News
Fluent Forms 6.2.8 Released
What’s new in Fluent Forms 6.2.8
Released: (Date: July 23, 2026)
Active installations: 700,000
Tested up to WordPress 7.0.2
Requires PHP 7.4
Changelog
- Fixes a stored XSS vulnerability in form submission handling
Previous releases
6.2.7 — (Date: July 16, 2026)
- Fixes date field restrictions configurations
- Improves Advanced Date Configuration to support more restriction patterns: comparison operators, combined conditions, month/day/year rules, and fixed calendar dates
- Improve Stripe API keys encryption to prevent being unusable after the site WordPress security salts change
- Hardens the date field’s inline script output against script-context injection
6.2.6 — (Date: July 10, 2026)
- Improves the Other option in conversational forms to be keyboard-activatable
- Fixes a manager privilege escalation via a delegated WordPress role
- Fixes a payment permission bypass letting form managers update transactions and cancel subscriptions
- Fixes an oEmbed JSONP path-traversal XSS vulnerability
- Fixes checkbox and radio Other option values not saving the translated label on multilingual sites